Privacy Policy

Palm images. When you use the scan, you upload a photo of your hand. It is stored in Cloudflare R2 and sent to our automated photo analysis provider, which notes the lines and mounts it can see. An approximate marked view may be shown through your private reading link until the photo expires.

Birth details. Your date of birth is required; your birth time and gender are optional. They are stored with your reading and sent, together with the notes on your photo, to the automated text provider that writes the chapters. The theme you choose is stored with the reading so the preview can highlight the relevant sections.

Email address. If you subscribe to the seven-day letters, we store your email address in our database and use it only to send you those seven letters. If you ask us to email you the link to your reading, we store the address with that reading and send two emails: the link, and one reminder a day later unless you have bought the report or deleted the reading by then. We also store it if you ask us to delete your data by email. When you pay, Waffo Pancake asks for your email on its own checkout page; we do not store that copy.

Payment data. Payments are processed by Waffo Pancake (Waffo.com Limited, Hong Kong), which sells the report to you as merchant of record. On its checkout page Waffo receives your email address, your country and your card details; it handles the card details directly and we never see your card number. From us it receives our order reference, the reading ID and which report you are buying. We receive back the order and payment references, the amount and whether the payment went through. Waffo's payment notice also carries your email address, which we do not store. Earlier purchases went through Creem in the same way.

Usage data. When you open a page or use the scan, your browser sends us a small event: its name (such as page_view, upload_started or checkout_clicked), the page path with any reading ID taken out, a random session ID that lasts 30 minutes, the name of the site that linked to the page if it was another site (such as google.com, never the full address), and where it applies the reading ID, the product and which hand you uploaded. Events are stored in our database. We do not store your IP address with them, we use them to see where the scan or checkout goes wrong, and we do not build advertising profiles from them.

• Cloudflare runs the site (Workers) and stores palm photos and generated report images (R2). It also keeps short-lived request logs. The seven-day letters and the reading links are sent through Cloudflare Email Service, which receives your address and each email.
• Supabase is our database: readings, orders, usage events, email subscriptions and deletion requests.
• Waffo Pancake (Waffo.com Limited, Hong Kong) runs the checkout and takes payments as merchant of record. Creem did this for earlier purchases.
• Our automated image and text providers: OpenAI GPT models, reached through third-party API services. A GPT model analyses the palm photo and writes the report chapters; it receives the photo, your birth details and the notes on your hand. GPT Image draws the report image from a short text description of your hand, without the photo.
• X and Bluesky, only if you claim the share reward: we look up the public post you link to.

The fonts are served from our own domain, so opening a page does not contact Google.

Only if you choose to add a supplement, we store your birth city, local birth time, time zone, longitude and traditional chart-rule selection. This rule is separate from gender identity. We also store your chosen topic, current country, optional question and comparison figures.

For the optional share reward, we store your submitted public post link, claim code, review status and non-content deduplication fingerprints. Review sends the post link or public identifier to the relevant social platform, never your private report, palm photo or birth details. Deleting a report removes its submitted profile link and claim code; minimal non-content fingerprints remain to prevent repeated free claims.

Birth calculations run on our server. Your question is matched against our guides there and is not sent to an external processing service. We do not send your information to the open-source projects. Supplements and earlier saved versions remain with your private report until you delete it. Deleting the report also deletes its stored supplement and version history. Do not include names, account numbers or other identifiers in your question.

Sources are versioned and may not apply in every country. Report statistics do not contain your birth details, question text or private access token.

Palm images are deleted automatically seven days after upload. A daily job does the deleting, so a photo can last up to a day longer. The reading itself (text, line notes, summary) stays with your private report link so you can come back to it; the photograph does not.

You can delete your photos and your report sooner, at any time, on the delete my data page. There are no accounts, so there is no account page or settings to look for.

On the delete my data page you can enter the reading ID from your report page, the email address you used, or both. With the reading ID, on the device that made the reading, we delete it straight away: the palm photos and the report image are removed from storage, the report is marked as deleted so nobody can open it again, and its birth-chart details are removed. The rest of the deleted record, including the report text and the order history, stays in our database. The page also clears what Destiny saved in your browser.

If you give only an email address, we record the request and act on it once we have confirmed that the address is yours.

Every one of the seven letters has an unsubscribe link. Using it deletes your address from the list, together with any letters that have not been sent yet. We keep a record of the letters already sent (the address, which letter and when); you can ask us to delete that as well, as described next.

You can also email hello@trypalmreading.com and ask us to delete your data. We will respond within 7 days.

GDPR (European Economic Area, UK)

• Right to access: request a copy of your data.
• Right to rectification: fix anything that is wrong.
• Right to erasure: be forgotten.
• Right to data portability: ask for a copy of your readings in a machine-readable file.
• Right to object: opt out of processing for marketing.
• Right to lodge a complaint with your data protection authority.

CCPA / CPRA (California)

• Right to know what we collect and why.
• Right to delete personal information.
• Right to correct inaccurate information.
• Right to opt out of the sale or sharing of personal information.
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, email hello@trypalmreading.com. We do not sell personal information, full stop.

The site does not set any cookies for visitors. It keeps a few items in your browser's own storage. Here is the whole list.

• destiny.reading.<id> (local storage): a copy of your reading, limited to the free preview, so the result page opens quickly on this device.
• destiny.readingAccess.<id> (local storage): the private key for your reading. It is sent to our server when you open your report, so this device can open it without the private link.
• destiny.homeStart (local storage): the photo you picked on the homepage, kept only until the scan page picks it up.
• destiny.analytics (session storage): the random session ID for the usage events described above. It is replaced after 30 minutes without activity and disappears when you close the tab.

Clearing this site's data in your browser removes all of them. We do not use advertising cookies, and we do not run Facebook Pixel, Google Ads tags, or TikTok pixels on this site.

Palm images and records are stored encrypted at rest by our storage providers. Connections to the site are encrypted in transit (TLS 1.2+). Access to production data is limited to the people who run Destiny.

No system is perfectly secure. If we ever suffer a breach affecting your data, we will notify you within 72 hours of becoming aware of it, with a clear explanation of what was exposed and what we are doing about it.

Destiny is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has used the site, please email us and we will delete their data.

Destiny runs on Cloudflare's global network, and our storage, payment and Our image and text providers may process data in the United States and other countries. If your data leaves your country, it is transferred under standard contractual clauses or equivalent safeguards.

If we materially change how we handle your data, we will say so at the top of this page and update the Last updated date. Minor edits, such as typos and clarifications, we will quietly fix.